Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/hAlLG94IoU5kKafsGjrMwkfb3Zw.roa
File: hAlLG94IoU5kKafsGjrMwkfb3Zw.roa (raw, json)
Hash identifier: ln0Y8HQZmVKSWnd47yKAygvb/rzeGv9K49zzh8vw+ME=
Subject key identifier: 84:09:4B:1B:DE:08:A1:4E:64:29:A7:EC:1A:3A:CC:C2:47:DB:DD:9C
Certificate issuer: /CN=79d10f728d6499a749ae5902e8fa883f1add4517
Certificate serial: 0194206827A7DCDD3AC10924AAF4B2F13CF2
Authority key identifier: 79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/hAlLG94IoU5kKafsGjrMwkfb3Zw.roa
Signing time: Wed 01 Jan 2025 05:48:04 +0000
ROA not before: Wed 01 Jan 2025 05:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.236.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:27:a7:dc:dd:3a:c1:09:24:aa:f4:b2:f1:3c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d10f728d6499a749ae5902e8fa883f1add4517
Validity
Not Before: Jan 1 05:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84094b1bde08a14e6429a7ec1a3accc247dbdd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:fa:3f:ca:c5:b1:62:c3:7d:d3:3c:b7:ec:
c1:18:97:65:0b:ef:56:18:cc:a7:dd:33:b2:06:ea:
a4:72:f4:26:b4:75:35:9b:b1:8c:e0:ae:a0:06:d0:
f2:8c:6a:6d:ca:93:6a:6d:b7:81:9a:4a:0d:49:2d:
b8:69:d4:21:09:96:1a:9c:f9:51:1c:e4:28:a0:ec:
9e:56:35:bb:cd:14:a6:1d:6c:00:da:f4:b5:2a:0b:
e3:75:40:03:99:d3:98:7e:83:44:b6:dd:0f:5f:51:
88:3a:d3:c5:6f:b0:42:a9:bd:f5:65:b2:06:2f:b2:
28:d6:65:97:0b:bd:7e:58:79:2c:21:0e:9e:dc:ef:
d3:b6:09:58:3b:69:7b:7a:2d:2f:5d:3b:b0:5b:83:
0c:b0:f9:b2:fa:99:0d:52:83:ba:7f:62:71:22:7c:
ef:04:dc:17:3e:17:62:8d:61:ce:66:07:96:db:5d:
b1:4e:09:50:6f:57:ad:ed:b0:be:9b:57:27:3a:f6:
80:30:17:d3:65:ad:26:38:5d:55:fb:70:5c:3e:32:
a0:94:79:87:20:03:9c:68:93:e9:04:79:77:db:3e:
56:5e:7c:ec:53:ee:b5:49:fe:fb:3f:44:69:97:dc:
07:34:b1:8b:2e:1d:23:01:0e:6a:82:74:dc:41:e3:
5d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:09:4B:1B:DE:08:A1:4E:64:29:A7:EC:1A:3A:CC:C2:47:DB:DD:9C
X509v3 Authority Key Identifier:
keyid:79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/hAlLG94IoU5kKafsGjrMwkfb3Zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.142.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:f3:0d:c8:b3:25:5f:fb:f8:d0:29:5c:69:31:6f:9f:09:5f:
83:f6:6f:68:28:ba:7c:7a:40:3c:57:5d:aa:3f:6b:52:c3:fa:
b4:f9:5e:04:48:90:5b:de:b6:6b:d2:f2:17:77:d5:9f:7d:14:
6e:05:9e:78:fc:13:26:d7:83:a3:ac:d3:4f:67:dd:96:60:35:
f4:66:c4:fb:8f:82:27:7f:31:99:c7:dc:99:c2:d9:d3:27:0e:
b3:40:b9:10:3f:20:fa:7b:9f:e7:e9:ee:d4:05:7e:a2:b3:f5:
38:74:d8:6b:3e:9e:0a:df:67:38:7d:ce:58:17:4c:46:bc:1a:
14:f6:fc:25:b5:aa:35:7f:02:90:f1:b3:94:66:a6:df:6a:38:
b6:65:ee:29:10:5a:ba:2e:19:02:58:36:94:d5:4b:c9:d2:61:
92:c7:45:4d:a5:e3:4f:cf:c9:44:ad:97:87:67:1d:86:da:3e:
4e:81:3c:07:0a:73:bf:e0:57:4d:5c:b3:a8:f1:cb:5b:d4:f0:
a7:a3:c8:b7:5c:46:7e:b2:ff:ea:b3:83:b3:9b:1a:e6:33:43:
53:dd:67:d6:fa:63:40:38:54:87:b9:34:73:5e:93:91:12:f6:
e8:96:1d:1b:27:f2:c2:2f:e4:07:43:39:4c:82:b0:41:fb:95:
c3:1f:f4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:18 2025 by rpki-client